@kensio/yulin 1.17.1 → 1.18.0

package/dist/service/cloudfront/controller/sim-cloudfront-request-pipeline.d.ts

@@ -1,10 +1,11 @@
 import type { SimCloudFrontControllerDependencies } from "./dependency/sim-cf-controller-dependency.js";
 /**
  * Runs a single simulated CloudFront request through its lifecycle:
- * route to a Distribution, apply the default root object, resolve the matching
- * Behavior, run viewer-request hooks, fetch from the Origin, replace an error
- * response with the Distribution's custom error page, apply the Behavior's
- * response headers policy, then run viewer-response hooks.
+ * route to a Distribution, put the request through the Distribution's web ACL,
+ * apply the default root object, resolve the matching Behavior, run
+ * viewer-request hooks, fetch from the Origin, replace an error response with
+ * the Distribution's custom error page, apply the Behavior's response headers
+ * policy, then run viewer-response hooks.
  *
  * This is the request-processing core, kept separate from the service
  * controller so the controller stays a thin adapter to the shared

package/dist/service/cloudfront/controller/sim-cloudfront-request-pipeline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloudfront-request-pipeline.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/controller/sim-cloudfront-request-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,8CAA8C,CAAC;AAGxG;;;;;;;;;;;GAWG;AACH,qBAAa,4BAA4B;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAnC,YAA6B,MAAM,EAAE,mCAAmC,EAAI;IAE5E;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAoEhD;CACF"}
+{"version":3,"file":"sim-cloudfront-request-pipeline.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/controller/sim-cloudfront-request-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,8CAA8C,CAAC;AAGxG;;;;;;;;;;;;GAYG;AACH,qBAAa,4BAA4B;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAnC,YAA6B,MAAM,EAAE,mCAAmC,EAAI;IAE5E;;OAEG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAiFhD;CACF"}

package/dist/service/cloudfront/controller/sim-cloudfront-request-pipeline.js

@@ -1,10 +1,11 @@
 import { simCfDefaultRootObjectRequest } from "./root-object/sim-cf-default-root-object-request.js";
 /**
  * Runs a single simulated CloudFront request through its lifecycle:
- * route to a Distribution, apply the default root object, resolve the matching
- * Behavior, run viewer-request hooks, fetch from the Origin, replace an error
- * response with the Distribution's custom error page, apply the Behavior's
- * response headers policy, then run viewer-response hooks.
+ * route to a Distribution, put the request through the Distribution's web ACL,
+ * apply the default root object, resolve the matching Behavior, run
+ * viewer-request hooks, fetch from the Origin, replace an error response with
+ * the Distribution's custom error page, apply the Behavior's response headers
+ * policy, then run viewer-response hooks.
  *
  * This is the request-processing core, kept separate from the service
  * controller so the controller stays a thin adapter to the shared
@@ -28,6 +29,15 @@ export class SimCloudFrontRequestPipeline {
             });
         }
         const { cloudFront, distribution: distro } = route;
+        // Put the request through the Distribution's web ACL, if it has one.
+        // CloudFront asks WAF before any content handling, so a blocked request is
+        // answered at the edge without a Behavior, a CloudFront Function or the
+        // Origin ever seeing it.
+        const webAclResult = await this.stages.webAclGuard.apply(requestReference, distro);
+        if (webAclResult instanceof Response) {
+            return webAclResult;
+        }
+        requestReference = webAclResult;
         requestReference = simCfDefaultRootObjectRequest(requestReference, distro);
         const behaviour = this.stages.behaviourResolver.resolve(requestReference, distro);
         // Handle viewer-request CFF, if any.

package/dist/service/cloudfront/controller/sim-cloudfront-request-pipeline.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloudfront-request-pipeline.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/controller/sim-cloudfront-request-pipeline.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,qDAAqD,CAAC;AAEpG;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,4BAA4B;IACV,MAAM;IAAnC,YAA6B,MAA2C;sBAA3C,MAAM;IAAwC,CAAC;IAE5E;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC3B,IAAI,gBAAgB,GAAG,OAAO,CAAC;QAE/B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;QAEzE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,QAAQ,CAAC,gDAAgD,EAAE;gBACpE,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAEnD,gBAAgB,GAAG,6BAA6B,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QAE3E,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CACrD,gBAAgB,EAChB,MAAM,CACP,CAAC;QAEF,qCAAqC;QACrC,4EAA4E;QAC5E,+DAA+D;QAC/D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAClE,UAAU,EACV,gBAAgB,EAChB,SAAS,CACV,CAAC;QACF,IAAI,SAAS,YAAY,QAAQ,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,gBAAgB,GAAG,SAAS,CAAC;QAE7B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAC1D,gBAAgB,EAChB,MAAM,EACN,SAAS,CACV,CAAC;QAEF,2EAA2E;QAC3E,0EAA0E;QAC1E,uEAAuE;QACvE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAChE,gBAAgB,EAChB,MAAM,EACN,cAAc,CACf,CAAC;QAEF,4EAA4E;QAC5E,+DAA+D;QAC/D,oEAAoE;QACpE,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAC1D,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,SAAS,CACV,CAAC;QAEF,sCAAsC;QACtC,wEAAwE;QACxE,kEAAkE;QAClE,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CACxD,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,SAAS,CACV,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sim-cloudfront-request-pipeline.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/controller/sim-cloudfront-request-pipeline.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,6BAA6B,EAAE,MAAM,qDAAqD,CAAC;AAEpG;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,4BAA4B;IACV,MAAM;IAAnC,YAA6B,MAA2C;sBAA3C,MAAM;IAAwC,CAAC;IAE5E;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC3B,IAAI,gBAAgB,GAAG,OAAO,CAAC;QAE/B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;QAEzE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,QAAQ,CAAC,gDAAgD,EAAE;gBACpE,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QAEnD,qEAAqE;QACrE,2EAA2E;QAC3E,wEAAwE;QACxE,yBAAyB;QACzB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CACtD,gBAAgB,EAChB,MAAM,CACP,CAAC;QACF,IAAI,YAAY,YAAY,QAAQ,EAAE,CAAC;YACrC,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,gBAAgB,GAAG,YAAY,CAAC;QAEhC,gBAAgB,GAAG,6BAA6B,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QAE3E,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CACrD,gBAAgB,EAChB,MAAM,CACP,CAAC;QAEF,qCAAqC;QACrC,4EAA4E;QAC5E,+DAA+D;QAC/D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAClE,UAAU,EACV,gBAAgB,EAChB,SAAS,CACV,CAAC;QACF,IAAI,SAAS,YAAY,QAAQ,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,gBAAgB,GAAG,SAAS,CAAC;QAE7B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAC1D,gBAAgB,EAChB,MAAM,EACN,SAAS,CACV,CAAC;QAEF,2EAA2E;QAC3E,0EAA0E;QAC1E,uEAAuE;QACvE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAChE,gBAAgB,EAChB,MAAM,EACN,cAAc,CACf,CAAC;QAEF,4EAA4E;QAC5E,+DAA+D;QAC/D,oEAAoE;QACpE,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAC1D,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,SAAS,CACV,CAAC;QAEF,sCAAsC;QACtC,wEAAwE;QACxE,kEAAkE;QAClE,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CACxD,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,SAAS,CACV,CAAC;IACJ,CAAC;CACF"}

package/dist/service/cloudfront/controller/web-acl/sim-cf-web-acl-guard.d.ts

@@ -0,0 +1,25 @@
+import type { SimCloudFrontDistribution } from "../../distribution/sim-cloudfront-distribution.js";
+import type { SimCfWebAclResolver } from "../../web-acl/sim-cf-web-acl.js";
+/**
+ * Puts a request through the web ACL a Distribution names, before anything
+ * else has a look at it.
+ *
+ * CloudFront asks WAF ahead of every content-handling stage, so a blocked
+ * request never reaches a viewer-request CloudFront Function, a cache
+ * Behavior, a response headers policy or the Origin. It is answered at the
+ * edge with the 403 the web ACL's block action describes.
+ */
+export declare class SimCfWebAclGuard {
+    private readonly resolveWebAcl;
+    constructor(resolveWebAcl: SimCfWebAclResolver);
+    /**
+     * Answer with the request to carry on with, or the response a blocked
+     * request gets.
+     *
+     * The request comes back rather than a bare verdict because an allowing rule
+     * can insert headers into what is forwarded, which is what WAF's custom
+     * request handling is for.
+     */
+    apply(request: Request, distribution: SimCloudFrontDistribution): Promise<Request | Response>;
+}
+//# sourceMappingURL=sim-cf-web-acl-guard.d.ts.map

package/dist/service/cloudfront/controller/web-acl/sim-cf-web-acl-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cf-web-acl-guard.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/controller/web-acl/sim-cf-web-acl-guard.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mDAAmD,CAAC;AAEnG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE3E;;;;;;;;GAQG;AACH,qBAAa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,aAAa;IAA1C,YAA6B,aAAa,EAAE,mBAAmB,EAAI;IAEnE;;;;;;;OAOG;IACG,KAAK,CACT,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,yBAAyB,GACtC,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,CA8B7B;CACF"}

package/dist/service/cloudfront/controller/web-acl/sim-cf-web-acl-guard.js

@@ -0,0 +1,86 @@
+import { simWafBlockedHttpResponse, simWafDefaultBlockedResponse, } from "../../../wafv2/evaluate/sim-waf-blocked-response.js";
+import { SimCloudFrontInvalidWebAclId } from "../../error/sim-cloudfront.error.js";
+/**
+ * Puts a request through the web ACL a Distribution names, before anything
+ * else has a look at it.
+ *
+ * CloudFront asks WAF ahead of every content-handling stage, so a blocked
+ * request never reaches a viewer-request CloudFront Function, a cache
+ * Behavior, a response headers policy or the Origin. It is answered at the
+ * edge with the 403 the web ACL's block action describes.
+ */
+export class SimCfWebAclGuard {
+    resolveWebAcl;
+    constructor(resolveWebAcl) {
+        this.resolveWebAcl = resolveWebAcl;
+    }
+    /**
+     * Answer with the request to carry on with, or the response a blocked
+     * request gets.
+     *
+     * The request comes back rather than a bare verdict because an allowing rule
+     * can insert headers into what is forwarded, which is what WAF's custom
+     * request handling is for.
+     */
+    async apply(request, distribution) {
+        const webAclArn = distribution.webAclArn;
+        if (webAclArn === undefined) {
+            return request;
+        }
+        const found = this.resolveWebAcl(webAclArn);
+        if (found === undefined) {
+            throw new SimCloudFrontInvalidWebAclId(`Sim CloudFront Distribution ${distribution.distributionId} names ` +
+                `web ACL ${webAclArn}, which does not exist. A web ACL a ` +
+                `Distribution is still in front of cannot be deleted in AWS, so a ` +
+                `simulation that deleted one has left the Distribution naming ` +
+                `nothing.`);
+        }
+        const decision = found.wafV2.evaluateRequest({
+            webAclArn,
+            request,
+            body: await requestBody(request),
+        });
+        return decision.action === "BLOCK"
+            ? simWafBlockedHttpResponse(decision.blocked ?? simWafDefaultBlockedResponse())
+            : allowedRequest(request, decision);
+    }
+}
+/**
+ * The request as it carries on past the web ACL.
+ *
+ * A rule that matched with custom request handling adds headers to what is
+ * forwarded, so the Origin and any CloudFront Function see them. A decision
+ * that inserted none leaves the request exactly as the viewer sent it.
+ */
+function allowedRequest(request, decision) {
+    if (decision.insertedHeaders.length === 0) {
+        return request;
+    }
+    const headers = new Headers(request.headers);
+    for (const header of decision.insertedHeaders) {
+        headers.set(header.name, header.value);
+    }
+    const isBodyAllowed = !/^(?:get|head)$/iu.test(request.method);
+    return new Request(request.url, {
+        method: request.method,
+        headers,
+        body: isBodyAllowed ? request.clone().body : null,
+        duplex: "half",
+        redirect: request.redirect,
+        signal: request.signal,
+    });
+}
+/**
+ * The request body the web ACL's rules are matched against.
+ *
+ * WAF reads the body of the request as it arrived, and a body is a stream that
+ * can only be read once, so it is read from a clone and the request carries on
+ * with its own copy intact.
+ */
+async function requestBody(request) {
+    if (request.body === null) {
+        return undefined;
+    }
+    return new Uint8Array(await request.clone().arrayBuffer());
+}
+//# sourceMappingURL=sim-cf-web-acl-guard.js.map

package/dist/service/cloudfront/controller/web-acl/sim-cf-web-acl-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cf-web-acl-guard.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/controller/web-acl/sim-cf-web-acl-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,qDAAqD,CAAC;AAG7D,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AAGnF;;;;;;;;GAQG;AACH,MAAM,OAAO,gBAAgB;IACE,aAAa;IAA1C,YAA6B,aAAkC;6BAAlC,aAAa;IAAwB,CAAC;IAEnE;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CACT,OAAgB,EAChB,YAAuC;QAEvC,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC;QAEzC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAE5C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,4BAA4B,CACpC,+BAA+B,YAAY,CAAC,cAAc,SAAS;gBACjE,WAAW,SAAS,sCAAsC;gBAC1D,mEAAmE;gBACnE,+DAA+D;gBAC/D,UAAU,CACb,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC;YAC3C,SAAS;YACT,OAAO;YACP,IAAI,EAAE,MAAM,WAAW,CAAC,OAAO,CAAC;SACjC,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,MAAM,KAAK,OAAO;YAChC,CAAC,CAAC,yBAAyB,CACvB,QAAQ,CAAC,OAAO,IAAI,4BAA4B,EAAE,CACnD;YACH,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,OAAgB,EAAE,QAAwB;IAChE,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE7C,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE/D,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO;QACP,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACjD,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,WAAW,CAAC,OAAgB;IACzC,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,IAAI,UAAU,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAC7D,CAAC"}

package/dist/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.d.ts

@@ -2,12 +2,14 @@ import type { SimCfCustomOriginDispatcher } from "../../origin/custom/sim-cf-cus
 import type { SimCloudFrontS3OriginResolver } from "../../origin/s3/sim-cloudfront-s3-origin.js";
 import type { SimCloudFrontOriginAccessControlRegistry } from "../../origin-access-control/sim-cf-origin-access-control-registry.js";
 import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../../response-headers-policy/sim-cf-response-headers-policy-registry.js";
+import type { SimCfWebAclResolver } from "../../web-acl/sim-cf-web-acl.js";
 import { SimCloudFrontDistributionConfigurator } from "./sim-cloud-front-distribution-configurator.js";
-interface SimCloudFrontConfiguratorOrigins {
+interface SimCloudFrontConfiguratorProperties {
     readonly s3OriginResolver: SimCloudFrontS3OriginResolver;
     readonly customOriginDispatcher?: SimCfCustomOriginDispatcher | undefined;
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    readonly webAclResolver?: SimCfWebAclResolver | undefined;
 }
 /**
  * Build the configurator that applies a DistributionConfig to a Distribution.
@@ -15,6 +17,6 @@ interface SimCloudFrontConfiguratorOrigins {
  * Creation and update apply the same config the same way, so they build the
  * same set of configurators.
  */
-export declare function makeSimCloudFrontDistributionConfigurator(origins: SimCloudFrontConfiguratorOrigins): SimCloudFrontDistributionConfigurator;
+export declare function makeSimCloudFrontDistributionConfigurator(properties: SimCloudFrontConfiguratorProperties): SimCloudFrontDistributionConfigurator;
 export {};
 //# sourceMappingURL=sim-cf-distribution-configurator.factory.d.ts.map

package/dist/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-distribution-configurator.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AAC1G,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AACjG,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,sEAAsE,CAAC;AACrI,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,0EAA0E,CAAC;AAG3I,OAAO,EAAE,qCAAqC,EAAE,MAAM,gDAAgD,CAAC;AAGvG,UAAU,gCAAgC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAC1E,QAAQ,CAAC,oBAAoB,EAAE,wCAAwC,CAAC;IACxE,QAAQ,CAAC,uBAAuB,EAAE,0CAA0C,CAAC;CAC9E;AAED;;;;;GAKG;AACH,wBAAgB,yCAAyC,CACvD,OAAO,EAAE,gCAAgC,GACxC,qCAAqC,CAcvC"}
+{"version":3,"file":"sim-cf-distribution-configurator.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AAC1G,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AACjG,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,sEAAsE,CAAC;AACrI,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,0EAA0E,CAAC;AAE3I,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAG3E,OAAO,EAAE,qCAAqC,EAAE,MAAM,gDAAgD,CAAC;AAGvG,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAC1E,QAAQ,CAAC,oBAAoB,EAAE,wCAAwC,CAAC;IACxE,QAAQ,CAAC,uBAAuB,EAAE,0CAA0C,CAAC;IAC7E,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CAC3D;AAED;;;;;GAKG;AACH,wBAAgB,yCAAyC,CACvD,UAAU,EAAE,mCAAmC,GAC9C,qCAAqC,CAevC"}

package/dist/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.js

@@ -1,3 +1,4 @@
+import { SimCfDistributionWebAcl } from "../../web-acl/sim-cf-distribution-web-acl.js";
 import { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
 import { SimCloudFrontBehaviorConfigurator } from "./sim-cloud-front-behavior-configurator.js";
 import { SimCloudFrontDistributionConfigurator } from "./sim-cloud-front-distribution-configurator.js";
@@ -8,8 +9,8 @@ import { SimCloudFrontOriginConfigurator } from "./sim-cloud-front-origin-config
  * Creation and update apply the same config the same way, so they build the
  * same set of configurators.
  */
-export function makeSimCloudFrontDistributionConfigurator(origins) {
-    const responseHeadersPolicy = new SimCfBehaviorResponseHeadersPolicy(origins.responseHeadersPolicies);
-    return new SimCloudFrontDistributionConfigurator(new SimCloudFrontOriginConfigurator(origins.s3OriginResolver, origins.originAccessControls, origins.customOriginDispatcher), new SimCloudFrontBehaviorConfigurator(responseHeadersPolicy), responseHeadersPolicy);
+export function makeSimCloudFrontDistributionConfigurator(properties) {
+    const responseHeadersPolicy = new SimCfBehaviorResponseHeadersPolicy(properties.responseHeadersPolicies);
+    return new SimCloudFrontDistributionConfigurator(new SimCloudFrontOriginConfigurator(properties.s3OriginResolver, properties.originAccessControls, properties.customOriginDispatcher), new SimCloudFrontBehaviorConfigurator(responseHeadersPolicy), responseHeadersPolicy, new SimCfDistributionWebAcl(properties.webAclResolver));
 }
 //# sourceMappingURL=sim-cf-distribution-configurator.factory.js.map

package/dist/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-distribution-configurator.factory.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAClG,OAAO,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AAC/F,OAAO,EAAE,qCAAqC,EAAE,MAAM,gDAAgD,CAAC;AACvG,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAS3F;;;;;GAKG;AACH,MAAM,UAAU,yCAAyC,CACvD,OAAyC;IAEzC,MAAM,qBAAqB,GAAG,IAAI,kCAAkC,CAClE,OAAO,CAAC,uBAAuB,CAChC,CAAC;IAEF,OAAO,IAAI,qCAAqC,CAC9C,IAAI,+BAA+B,CACjC,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,oBAAoB,EAC5B,OAAO,CAAC,sBAAsB,CAC/B,EACD,IAAI,iCAAiC,CAAC,qBAAqB,CAAC,EAC5D,qBAAqB,CACtB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"sim-cf-distribution-configurator.factory.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cf-distribution-configurator.factory.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AAEvF,OAAO,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAClG,OAAO,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AAC/F,OAAO,EAAE,qCAAqC,EAAE,MAAM,gDAAgD,CAAC;AACvG,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAU3F;;;;;GAKG;AACH,MAAM,UAAU,yCAAyC,CACvD,UAA+C;IAE/C,MAAM,qBAAqB,GAAG,IAAI,kCAAkC,CAClE,UAAU,CAAC,uBAAuB,CACnC,CAAC;IAEF,OAAO,IAAI,qCAAqC,CAC9C,IAAI,+BAA+B,CACjC,UAAU,CAAC,gBAAgB,EAC3B,UAAU,CAAC,oBAAoB,EAC/B,UAAU,CAAC,sBAAsB,CAClC,EACD,IAAI,iCAAiC,CAAC,qBAAqB,CAAC,EAC5D,qBAAqB,EACrB,IAAI,uBAAuB,CAAC,UAAU,CAAC,cAAc,CAAC,CACvD,CAAC;AACJ,CAAC"}

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.d.ts

@@ -3,6 +3,7 @@ import type { SimCloudFrontDistribution } from "../sim-cloudfront-distribution.j
 import type { SimCloudFrontOriginConfigurator } from "./sim-cloud-front-origin-configurator.js";
 import type { SimCloudFrontBehaviorConfigurator } from "./sim-cloud-front-behavior-configurator.js";
 import type { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-response-headers-policy.js";
+import { type SimCfDistributionWebAcl } from "../../web-acl/sim-cf-distribution-web-acl.js";
 /**
  * Applies top-level Distribution configuration to a sim CloudFront Distribution.
  *
@@ -15,13 +16,18 @@ import type { SimCfBehaviorResponseHeadersPolicy } from "./sim-cf-behavior-respo
  *
  * Named Cache Behaviors must be added after the default so that the default
  * always acts as the fallback when no path pattern matches.
+ *
+ * The web ACL comes before all of it, because a web ACL decides a request
+ * before any of the above handles it, and a config naming one that is not
+ * there is refused rather than half applied.
  */
 export declare class SimCloudFrontDistributionConfigurator {
     private readonly originConfigurator;
     private readonly behaviorConfigurator;
     private readonly responseHeadersPolicy;
+    private readonly webAcl;
     private readonly customErrorConfigurator;
-    constructor(originConfigurator: SimCloudFrontOriginConfigurator, behaviorConfigurator: SimCloudFrontBehaviorConfigurator, responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy);
+    constructor(originConfigurator: SimCloudFrontOriginConfigurator, behaviorConfigurator: SimCloudFrontBehaviorConfigurator, responseHeadersPolicy: SimCfBehaviorResponseHeadersPolicy, webAcl: SimCfDistributionWebAcl);
     /**
      * Refuse a DistributionConfig this simulation cannot apply, before anything
      * is applied.

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloud-front-distribution-configurator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,kEAAkE,CAAC;AACxH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAChG,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AACpG,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAIvG;;;;;;;;;;;;GAYG;AACH,qBAAa,qCAAqC;IAK9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IANxC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CACK;IAE7C,YACmB,kBAAkB,EAAE,+BAA+B,EACnD,oBAAoB,EAAE,iCAAiC,EACvD,qBAAqB,EAAE,kCAAkC,EACxE;IAEJ;;;;;;;;;OASG;IACH,kBAAkB,CAChB,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CAEN;IAED;;OAEG;IACH,SAAS,CACP,YAAY,EAAE,yBAAyB,EACvC,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CAiCN;IAED;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;CAe1B"}
+{"version":3,"file":"sim-cloud-front-distribution-configurator.d.ts","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,kEAAkE,CAAC;AACxH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAChG,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AACpG,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,8CAA8C,CAAC;AAGvG,OAAO,EACL,KAAK,uBAAuB,EAE7B,MAAM,8CAA8C,CAAC;AAEtD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,qCAAqC;IAK9C,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,qBAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAPzB,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CACK;IAE7C,YACmB,kBAAkB,EAAE,+BAA+B,EACnD,oBAAoB,EAAE,iCAAiC,EACvD,qBAAqB,EAAE,kCAAkC,EACzD,MAAM,EAAE,uBAAuB,EAC9C;IAEJ;;;;;;;;;OASG;IACH,kBAAkB,CAChB,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CAGN;IAED;;OAEG;IACH,SAAS,CACP,YAAY,EAAE,yBAAyB,EACvC,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CAsCN;IAED;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;CAe1B"}

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.js

@@ -1,5 +1,6 @@
 import { SimCloudFrontCustomErrorConfigurator } from "./sim-cloud-front-custom-error-configurator.js";
 import { SimCloudFrontInvalidDefaultRootObject } from "../../error/sim-cloudfront.error.js";
+import { simCfWebAclArn, } from "../../web-acl/sim-cf-distribution-web-acl.js";
 /**
  * Applies top-level Distribution configuration to a sim CloudFront Distribution.
  *
@@ -12,16 +13,22 @@ import { SimCloudFrontInvalidDefaultRootObject } from "../../error/sim-cloudfron
  *
  * Named Cache Behaviors must be added after the default so that the default
  * always acts as the fallback when no path pattern matches.
+ *
+ * The web ACL comes before all of it, because a web ACL decides a request
+ * before any of the above handles it, and a config naming one that is not
+ * there is refused rather than half applied.
  */
 export class SimCloudFrontDistributionConfigurator {
     originConfigurator;
     behaviorConfigurator;
     responseHeadersPolicy;
+    webAcl;
     customErrorConfigurator = new SimCloudFrontCustomErrorConfigurator();
-    constructor(originConfigurator, behaviorConfigurator, responseHeadersPolicy) {
+    constructor(originConfigurator, behaviorConfigurator, responseHeadersPolicy, webAcl) {
         this.originConfigurator = originConfigurator;
         this.behaviorConfigurator = behaviorConfigurator;
         this.responseHeadersPolicy = responseHeadersPolicy;
+        this.webAcl = webAcl;
     }
     /**
      * Refuse a DistributionConfig this simulation cannot apply, before anything
@@ -35,11 +42,16 @@ export class SimCloudFrontDistributionConfigurator {
      */
     assertConfigurable(distributionConfig) {
         this.responseHeadersPolicy.assertAllExist(distributionConfig);
+        this.webAcl.assertUsable(distributionConfig);
     }
     /**
      * Configure a Distribution from its DistributionConfig.
      */
     configure(distribution, distributionConfig) {
+        // A web ACL the simulation cannot find is refused before anything is
+        // applied, so a creation is turned away for it as an update already is.
+        this.webAcl.assertUsable(distributionConfig);
+        distribution.webAclArn = simCfWebAclArn(distributionConfig);
         const aliasItems = distributionConfig.Aliases?.Items ?? [];
         for (const alias of aliasItems) {
             distribution.addAlternateDomainName(alias);

package/dist/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloud-front-distribution-configurator.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAE5F;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,qCAAqC;IAK7B,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;IANvB,uBAAuB,GACtC,IAAI,oCAAoC,EAAE,CAAC;IAE7C,YACmB,kBAAmD,EACnD,oBAAuD,EACvD,qBAAyD;kCAFzD,kBAAkB;oCAClB,oBAAoB;qCACpB,qBAAqB;IACrC,CAAC;IAEJ;;;;;;;;;OASG;IACH,kBAAkB,CAChB,kBAAmD;QAEnD,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,SAAS,CACP,YAAuC,EACvC,kBAAmD;QAEnD,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,YAAY,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;QAC5D,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,6BAA6B,CACrD,YAAY,EACZ,kBAAkB,CAAC,oBAAoB,CACxC,CAAC;QAEF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;QAC1E,KAAK,MAAM,aAAa,IAAI,kBAAkB,EAAE,CAAC;YAC/C,IAAI,CAAC,oBAAoB,CAAC,sBAAsB,CAC9C,YAAY,EACZ,aAAa,CACd,CAAC;QACJ,CAAC;QAED,YAAY,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CACrD,kBAAkB,CAAC,iBAAiB,CACrC,CAAC;QAEF,MAAM,gBAAgB,GACpB,kBAAkB,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC;QACvD,KAAK,MAAM,mBAAmB,IAAI,gBAAgB,EAAE,CAAC;YACnD,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,iBAAiB,CACvB,iBAAqC;QAErC,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,KAAK,EAAE,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,qCAAqC,CAC7C,gCAAgC,iBAAiB,sCAAsC,CACxF,CAAC;QACJ,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"sim-cloud-front-distribution-configurator.js","sourceRoot":"","sources":["../../../../../src/service/cloudfront/distribution/configurator/sim-cloud-front-distribution-configurator.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oCAAoC,EAAE,MAAM,gDAAgD,CAAC;AACtG,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,EAEL,cAAc,GACf,MAAM,8CAA8C,CAAC;AAEtD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,qCAAqC;IAK7B,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;IACrB,MAAM;IAPR,uBAAuB,GACtC,IAAI,oCAAoC,EAAE,CAAC;IAE7C,YACmB,kBAAmD,EACnD,oBAAuD,EACvD,qBAAyD,EACzD,MAA+B;kCAH/B,kBAAkB;oCAClB,oBAAoB;qCACpB,qBAAqB;sBACrB,MAAM;IACtB,CAAC;IAEJ;;;;;;;;;OASG;IACH,kBAAkB,CAChB,kBAAmD;QAEnD,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,SAAS,CACP,YAAuC,EACvC,kBAAmD;QAEnD,qEAAqE;QACrE,wEAAwE;QACxE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC;QAC7C,YAAY,CAAC,SAAS,GAAG,cAAc,CAAC,kBAAkB,CAAC,CAAC;QAE5D,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,YAAY,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;QAC5D,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,6BAA6B,CACrD,YAAY,EACZ,kBAAkB,CAAC,oBAAoB,CACxC,CAAC;QAEF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;QAC1E,KAAK,MAAM,aAAa,IAAI,kBAAkB,EAAE,CAAC;YAC/C,IAAI,CAAC,oBAAoB,CAAC,sBAAsB,CAC9C,YAAY,EACZ,aAAa,CACd,CAAC;QACJ,CAAC;QAED,YAAY,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CACrD,kBAAkB,CAAC,iBAAiB,CACrC,CAAC;QAEF,MAAM,gBAAgB,GACpB,kBAAkB,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC;QACvD,KAAK,MAAM,mBAAmB,IAAI,gBAAgB,EAAE,CAAC;YACnD,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,iBAAiB,CACvB,iBAAqC;QAErC,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,KAAK,EAAE,EAAE,CAAC;YAChE,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,qCAAqC,CAC7C,gCAAgC,iBAAiB,sCAAsC,CACxF,CAAC;QACJ,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC3B,CAAC;CACF"}

package/dist/service/cloudfront/distribution/sim-cf-distribution-configuration-state.d.ts

@@ -0,0 +1,24 @@
+import type { SimAcmRegistry } from "../../acm/registry/sim-acm-registry.js";
+import type { SimCfCustomOriginDispatcher } from "../origin/custom/sim-cf-custom-origin-dispatcher.js";
+import type { SimCloudFrontS3OriginResolver } from "../origin/s3/sim-cloudfront-s3-origin.js";
+import type { SimCloudFrontOriginAccessControlRegistry } from "../origin-access-control/sim-cf-origin-access-control-registry.js";
+import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../response-headers-policy/sim-cf-response-headers-policy-registry.js";
+import type { SimCfWebAclResolver } from "../web-acl/sim-cf-web-acl.js";
+/**
+ * How the commands that configure a Distribution reach everything a
+ * DistributionConfig names outside itself.
+ *
+ * A DistributionConfig is mostly references: a Bucket or a hostname per
+ * Origin, a certificate, an origin access control, a response headers policy,
+ * a web ACL. None of them belongs to CloudFront, and creation and update
+ * resolve every one of them the same way, so they travel together.
+ */
+export interface SimCfDistributionConfigurationState {
+    readonly s3OriginResolver: SimCloudFrontS3OriginResolver;
+    readonly customOriginDispatcher: SimCfCustomOriginDispatcher | undefined;
+    readonly acmRegistry: SimAcmRegistry | undefined;
+    readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
+    readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    readonly webAclResolver: SimCfWebAclResolver | undefined;
+}
+//# sourceMappingURL=sim-cf-distribution-configuration-state.d.ts.map

package/dist/service/cloudfront/distribution/sim-cf-distribution-configuration-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cf-distribution-configuration-state.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/distribution/sim-cf-distribution-configuration-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AACvG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,mEAAmE,CAAC;AAClI,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,uEAAuE,CAAC;AACxI,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAExE;;;;;;;;GAQG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,sBAAsB,EAAE,2BAA2B,GAAG,SAAS,CAAC;IACzE,QAAQ,CAAC,WAAW,EAAE,cAAc,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,oBAAoB,EAAE,wCAAwC,CAAC;IACxE,QAAQ,CAAC,uBAAuB,EAAE,0CAA0C,CAAC;IAC7E,QAAQ,CAAC,cAAc,EAAE,mBAAmB,GAAG,SAAS,CAAC;CAC1D"}

package/dist/service/cloudfront/distribution/sim-cf-distribution-configuration-state.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sim-cf-distribution-configuration-state.js.map

package/dist/service/cloudfront/distribution/sim-cf-distribution-configuration-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-cf-distribution-configuration-state.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/distribution/sim-cf-distribution-configuration-state.ts"],"names":[],"mappings":""}

package/dist/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.d.ts

@@ -4,6 +4,7 @@ import type { SimCloudFrontS3OriginResolver } from "../origin/s3/sim-cloudfront-
 import type { SimCloudFrontOriginAccessControlRegistry } from "../origin-access-control/sim-cf-origin-access-control-registry.js";
 import type { SimCloudFrontResponseHeadersPolicyRegistry } from "../response-headers-policy/sim-cf-response-headers-policy-registry.js";
 import type { SimCloudFrontRegistry } from "../registry/sim-cloud-front-registry.js";
+import type { SimCfWebAclResolver } from "../web-acl/sim-cf-web-acl.js";
 import type { SimCloudFrontDistribution } from "./sim-cloudfront-distribution.js";
 interface SimCloudFrontDistributionReconfigurerProperties {
     readonly cloudFrontRegistry: SimCloudFrontRegistry;
@@ -11,6 +12,7 @@ interface SimCloudFrontDistributionReconfigurerProperties {
     readonly customOriginDispatcher?: SimCfCustomOriginDispatcher | undefined;
     readonly originAccessControls: SimCloudFrontOriginAccessControlRegistry;
     readonly responseHeadersPolicies: SimCloudFrontResponseHeadersPolicyRegistry;
+    readonly webAclResolver?: SimCfWebAclResolver | undefined;
 }
 /**
  * Applies a replacement DistributionConfig to a Distribution already in place.

package/dist/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-distribution-reconfigurer.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+DAA+D,CAAC;AACrH,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AACvG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,mEAAmE,CAAC;AAClI,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,uEAAuE,CAAC;AACxI,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAGrF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAElF,UAAU,+CAA+C;IACvD,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAC1E,QAAQ,CAAC,oBAAoB,EAAE,wCAAwC,CAAC;IACxE,QAAQ,CAAC,uBAAuB,EAAE,0CAA0C,CAAC;CAC9E;AAED;;;;;;;GAOG;AACH,qBAAa,qCAAqC;IAChD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwC;IAErE,YAAY,UAAU,EAAE,+CAA+C,EAGtE;IAED;;;;;;;;;;OAUG;IACH,WAAW,CACT,YAAY,EAAE,yBAAyB,EACvC,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CAoBN;CACF"}
+{"version":3,"file":"sim-cf-distribution-reconfigurer.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+DAA+D,CAAC;AACrH,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qDAAqD,CAAC;AACvG,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AAC9F,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,mEAAmE,CAAC;AAClI,OAAO,KAAK,EAAE,0CAA0C,EAAE,MAAM,uEAAuE,CAAC;AACxI,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AACrF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAGxE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAElF,UAAU,+CAA+C;IACvD,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAC1E,QAAQ,CAAC,oBAAoB,EAAE,wCAAwC,CAAC;IACxE,QAAQ,CAAC,uBAAuB,EAAE,0CAA0C,CAAC;IAC7E,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;CAC3D;AAED;;;;;;;GAOG;AACH,qBAAa,qCAAqC;IAChD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAC3D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAwC;IAErE,YAAY,UAAU,EAAE,+CAA+C,EAGtE;IAED;;;;;;;;;;OAUG;IACH,WAAW,CACT,YAAY,EAAE,yBAAyB,EACvC,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CAoBN;CACF"}

package/dist/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cf-distribution-reconfigurer.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,yCAAyC,EAAE,MAAM,4DAA4D,CAAC;AAYvH;;;;;;;GAOG;AACH,MAAM,OAAO,qCAAqC;IAC/B,kBAAkB,CAAwB;IAC1C,YAAY,CAAwC;IAErE,YAAY,UAA2D;QACrE,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,yCAAyC,CAAC,UAAU,CAAC,CAAC;IAC5E,CAAC;IAED;;;;;;;;;;OAUG;IACH,WAAW,CACT,YAAuC,EACvC,kBAAmD;QAEnD,MAAM,EAAE,cAAc,EAAE,GAAG,YAAY,CAAC;QAExC,IAAI,CAAC,kBAAkB,CAAC,mCAAmC,CACzD,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,EACvC,cAAc,CACf,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QAEzD,IAAI,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,cAAc,CAAC,CAAC;QAEvE,YAAY,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QAE9D,KAAK,MAAM,mBAAmB,IAAI,YAAY,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACzE,IAAI,CAAC,kBAAkB,CAAC,2BAA2B,CACjD,mBAAmB,EACnB,cAAc,CACf,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"sim-cf-distribution-reconfigurer.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/distribution/sim-cf-distribution-reconfigurer.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,yCAAyC,EAAE,MAAM,4DAA4D,CAAC;AAavH;;;;;;;GAOG;AACH,MAAM,OAAO,qCAAqC;IAC/B,kBAAkB,CAAwB;IAC1C,YAAY,CAAwC;IAErE,YAAY,UAA2D;QACrE,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC,kBAAkB,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,yCAAyC,CAAC,UAAU,CAAC,CAAC;IAC5E,CAAC;IAED;;;;;;;;;;OAUG;IACH,WAAW,CACT,YAAuC,EACvC,kBAAmD;QAEnD,MAAM,EAAE,cAAc,EAAE,GAAG,YAAY,CAAC;QAExC,IAAI,CAAC,kBAAkB,CAAC,mCAAmC,CACzD,kBAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,EACvC,cAAc,CACf,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;QAEzD,IAAI,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,cAAc,CAAC,CAAC;QAEvE,YAAY,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QAE9D,KAAK,MAAM,mBAAmB,IAAI,YAAY,CAAC,uBAAuB,EAAE,EAAE,CAAC;YACzE,IAAI,CAAC,kBAAkB,CAAC,2BAA2B,CACjD,mBAAmB,EACnB,cAAc,CACf,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/service/cloudfront/distribution/sim-cloudfront-distribution.d.ts

@@ -51,6 +51,18 @@ export declare class SimCloudFrontDistribution {
      * Set the object this sim Distribution serves for a request to its root.
      */
     set defaultRootObject(defaultRootObject: string | undefined);
+    /**
+     * The ARN of the web ACL this sim Distribution is behind, if any.
+     *
+     * CloudFront names its web ACL in the DistributionConfig rather than through
+     * WAFv2's AssociateWebACL, so this is read from the config the same way the
+     * default root object is.
+     */
+    get webAclArn(): string | undefined;
+    /**
+     * Set the ARN of the web ACL this sim Distribution is behind.
+     */
+    set webAclArn(webAclArn: string | undefined);
     /**
      * Move the sim Distribution into Deployed status.
      */

package/dist/service/cloudfront/distribution/sim-cloudfront-distribution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloudfront-distribution.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/distribution/sim-cloudfront-distribution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AACtF,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,yDAAyD,CAAC;AAEhH,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+DAA+D,CAAC;AACrH,OAAO,EAAE,KAAK,QAAQ,EAAgB,MAAM,kCAAkC,CAAC;AAG/E,MAAM,MAAM,2BAA2B,GAAG,KAAK,CAC7C,MAAM,EACN,6BAA6B,CAC9B,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG,WAAW,GAAG,UAAU,CAAC;AAEvE,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,cAAc,CAAC,EAAE,2BAA2B,CAAC;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,+BAA+B,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,+BAA+B,CAAC;IAC9D;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;CAC3B;AAED;;GAEG;AACH,qBAAa,yBAAyB;;IACpC,SAAgB,cAAc,EAAE,2BAA2B,CAAC;IAC5D,SAAgB,SAAS,EAAE,eAAe,CAAC;IAC3C,SAAgB,SAAS,EAAE,qBAAqB,EAAE,CAAM;IACxD,SAAgB,oBAAoB,EAAE,gCAAgC,EAAE,CAAM;IAC9E,SAAgB,gBAAgB,EAAE,IAAI,CAAC;IAMvC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqB;IAE1D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0C;IAElE,YAAY,UAAU,GAAE,mCAAwC,EAe/D;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,+BAA+B,CAE5C;IAED;;OAEG;IACH,IAAI,kBAAkB,IAAI,+BAA+B,GAAG,SAAS,CAEpE;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;OAEG;IACH,IAAI,iBAAiB,IAAI,MAAM,GAAG,SAAS,CAE1C;IAED;;OAEG;IACH,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,EAE1D;IAED;;OAEG;IACH,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAGlC;IAED;;;;;;;;OAQG;IACH,oBAAoB,CAClB,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CASN;IAED;;;;;;;OAOG;IACH,eAAe,IAAI,IAAI,CAMtB;IAED;;OAEG;IACH,uBAAuB,IAAI,WAAW,CAAC,MAAM,CAAC,CAE7C;IAED;;OAEG;IACH,UAAU,IAAI,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAErD;IAED;;OAEG;IACH,sBAAsB,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAExD;IAED;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAEjD;IAED;;OAEG;IACH,sBAAsB,CACpB,mBAAmB,EAAE,gCAAgC,GACpD,IAAI,CAEN;IAED;;OAEG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAE/D;IAED;;OAEG;IACH,sBAAsB,CAAC,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAE3D;IAED;;OAEG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAE7D;CACF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,2BAA2B,CAIhE"}
+{"version":3,"file":"sim-cloudfront-distribution.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/distribution/sim-cloudfront-distribution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAC9E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AACtF,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,yDAAyD,CAAC;AAEhH,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+DAA+D,CAAC;AACrH,OAAO,EAAE,KAAK,QAAQ,EAAgB,MAAM,kCAAkC,CAAC;AAG/E,MAAM,MAAM,2BAA2B,GAAG,KAAK,CAC7C,MAAM,EACN,6BAA6B,CAC9B,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG,WAAW,GAAG,UAAU,CAAC;AAEvE,UAAU,mCAAmC;IAC3C,QAAQ,CAAC,cAAc,CAAC,EAAE,2BAA2B,CAAC;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,+BAA+B,CAAC;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,+BAA+B,CAAC;IAC9D;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;CAC3B;AAED;;GAEG;AACH,qBAAa,yBAAyB;;IACpC,SAAgB,cAAc,EAAE,2BAA2B,CAAC;IAC5D,SAAgB,SAAS,EAAE,eAAe,CAAC;IAC3C,SAAgB,SAAS,EAAE,qBAAqB,EAAE,CAAM;IACxD,SAAgB,oBAAoB,EAAE,gCAAgC,EAAE,CAAM;IAC9E,SAAgB,gBAAgB,EAAE,IAAI,CAAC;IAOvC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqB;IAE1D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0C;IAElE,YAAY,UAAU,GAAE,mCAAwC,EAe/D;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,+BAA+B,CAE5C;IAED;;OAEG;IACH,IAAI,kBAAkB,IAAI,+BAA+B,GAAG,SAAS,CAEpE;IAED;;OAEG;IACH,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;OAEG;IACH,IAAI,iBAAiB,IAAI,MAAM,GAAG,SAAS,CAE1C;IAED;;OAEG;IACH,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,EAE1D;IAED;;;;;;OAMG;IACH,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAElC;IAED;;OAEG;IACH,IAAI,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAE1C;IAED;;OAEG;IACH,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAGlC;IAED;;;;;;;;OAQG;IACH,oBAAoB,CAClB,kBAAkB,EAAE,+BAA+B,GAClD,IAAI,CAUN;IAED;;;;;;;OAOG;IACH,eAAe,IAAI,IAAI,CAMtB;IAED;;OAEG;IACH,uBAAuB,IAAI,WAAW,CAAC,MAAM,CAAC,CAE7C;IAED;;OAEG;IACH,UAAU,IAAI,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAErD;IAED;;OAEG;IACH,sBAAsB,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAExD;IAED;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAEjD;IAED;;OAEG;IACH,sBAAsB,CACpB,mBAAmB,EAAE,gCAAgC,GACpD,IAAI,CAEN;IAED;;OAEG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAE/D;IAED;;OAEG;IACH,sBAAsB,CAAC,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAE3D;IAED;;OAEG;IACH,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAE7D;CACF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,2BAA2B,CAIhE"}

package/dist/service/cloudfront/distribution/sim-cloudfront-distribution.js

@@ -15,6 +15,7 @@ export class SimCloudFrontDistribution {
     #distributionConfig;
     #enabled;
     #defaultRootObject;
+    #webAclArn;
     alternateDomainNames = new Set();
     origins = new Map();
     constructor(properties = {}) {
@@ -56,6 +57,22 @@ export class SimCloudFrontDistribution {
     set defaultRootObject(defaultRootObject) {
         this.#defaultRootObject = defaultRootObject;
     }
+    /**
+     * The ARN of the web ACL this sim Distribution is behind, if any.
+     *
+     * CloudFront names its web ACL in the DistributionConfig rather than through
+     * WAFv2's AssociateWebACL, so this is read from the config the same way the
+     * default root object is.
+     */
+    get webAclArn() {
+        return this.#webAclArn;
+    }
+    /**
+     * Set the ARN of the web ACL this sim Distribution is behind.
+     */
+    set webAclArn(webAclArn) {
+        this.#webAclArn = webAclArn;
+    }
     /**
      * Move the sim Distribution into Deployed status.
      */
@@ -77,6 +94,7 @@ export class SimCloudFrontDistribution {
         this.#enabled = distributionConfig.Enabled ?? true;
         this.#status = "Deploying";
         this.#defaultRootObject = undefined;
+        this.#webAclArn = undefined;
         this.behaviors.length = 0;
         this.customErrorResponses.length = 0;
         this.alternateDomainNames.clear();

package/dist/service/cloudfront/distribution/sim-cloudfront-distribution.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloudfront-distribution.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/distribution/sim-cloudfront-distribution.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxC,OAAO,EACL,mBAAmB,GAEpB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAiB,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,oCAAoC,EAAE,MAAM,kCAAkC,CAAC;AAqBxF;;GAEG;AACH,MAAM,OAAO,yBAAyB;IACpB,cAAc,CAA8B;IAC5C,SAAS,CAAkB;IAC3B,SAAS,GAA4B,EAAE,CAAC;IACxC,oBAAoB,GAAuC,EAAE,CAAC;IAC9D,gBAAgB,CAAO;IAEvC,OAAO,CAAkC;IACzC,mBAAmB,CAA8C;IACjE,QAAQ,CAAU;IAClB,kBAAkB,CAAqB;IACtB,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IAElE,YAAY,UAAU,GAAwC,EAAE;QAC9D,MAAM,EACJ,cAAc,GAAG,kBAAkB,EAAE,EACrC,MAAM,GAAG,UAAU,EACnB,SAAS,GAAG,mBAAmB,EAAE,EACjC,kBAAkB,EAClB,KAAK,GAAG,IAAI,YAAY,EAAE,GAC3B,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,mBAAmB,GAAG,kBAAkB,CAAC;QAC9C,IAAI,CAAC,QAAQ,GAAG,kBAAkB,EAAE,OAAO,IAAI,IAAI,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,IAAI,iBAAiB,CAAC,iBAAqC;QACzD,IAAI,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC;QAC1B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;;OAQG;IACH,oBAAoB,CAClB,kBAAmD;QAEnD,IAAI,CAAC,mBAAmB,GAAG,kBAAkB,CAAC;QAC9C,IAAI,CAAC,QAAQ,GAAG,kBAAkB,CAAC,OAAO,IAAI,IAAI,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC;QAC3B,IAAI,CAAC,kBAAkB,GAAG,SAAS,CAAC;QACpC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED;;;;;;;OAOG;IACH,eAAe;QACb,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,oCAAoC,CAC5C,+BAA+B,IAAI,CAAC,cAAc,iFAAiF,CACpI,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,uBAAuB;QACrB,OAAO,IAAI,CAAC,oBAAoB,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,mBAA2B;QAChD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAA+B;QACzC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,sBAAsB,CACpB,mBAAqD;QAErD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,UAAkB,EAAE,MAA2B;QACvD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,mBAA2B;QAChD,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,UAAkB;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAC7B,eAAe,CACe,CAAC;AACnC,CAAC"}
+{"version":3,"file":"sim-cloudfront-distribution.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/distribution/sim-cloudfront-distribution.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxC,OAAO,EACL,mBAAmB,GAEpB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAiB,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,oCAAoC,EAAE,MAAM,kCAAkC,CAAC;AAqBxF;;GAEG;AACH,MAAM,OAAO,yBAAyB;IACpB,cAAc,CAA8B;IAC5C,SAAS,CAAkB;IAC3B,SAAS,GAA4B,EAAE,CAAC;IACxC,oBAAoB,GAAuC,EAAE,CAAC;IAC9D,gBAAgB,CAAO;IAEvC,OAAO,CAAkC;IACzC,mBAAmB,CAA8C;IACjE,QAAQ,CAAU;IAClB,kBAAkB,CAAqB;IACvC,UAAU,CAAqB;IACd,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IAElE,YAAY,UAAU,GAAwC,EAAE;QAC9D,MAAM,EACJ,cAAc,GAAG,kBAAkB,EAAE,EACrC,MAAM,GAAG,UAAU,EACnB,SAAS,GAAG,mBAAmB,EAAE,EACjC,kBAAkB,EAClB,KAAK,GAAG,IAAI,YAAY,EAAE,GAC3B,GAAG,UAAU,CAAC;QAEf,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,mBAAmB,GAAG,kBAAkB,CAAC;QAC9C,IAAI,CAAC,QAAQ,GAAG,kBAAkB,EAAE,OAAO,IAAI,IAAI,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,IAAI,iBAAiB,CAAC,iBAAqC;QACzD,IAAI,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;IAC9C,CAAC;IAED;;;;;;OAMG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,IAAI,SAAS,CAAC,SAA6B;QACzC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC;QAC1B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;;OAQG;IACH,oBAAoB,CAClB,kBAAmD;QAEnD,IAAI,CAAC,mBAAmB,GAAG,kBAAkB,CAAC;QAC9C,IAAI,CAAC,QAAQ,GAAG,kBAAkB,CAAC,OAAO,IAAI,IAAI,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC;QAC3B,IAAI,CAAC,kBAAkB,GAAG,SAAS,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED;;;;;;;OAOG;IACH,eAAe;QACb,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,oCAAoC,CAC5C,+BAA+B,IAAI,CAAC,cAAc,iFAAiF,CACpI,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,uBAAuB;QACrB,OAAO,IAAI,CAAC,oBAAoB,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,mBAA2B;QAChD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAA+B;QACzC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,sBAAsB,CACpB,mBAAqD;QAErD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,UAAkB,EAAE,MAA2B;QACvD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,mBAA2B;QAChD,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,UAAkB;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAC7B,eAAe,CACe,CAAC;AACnC,CAAC"}

package/dist/service/cloudfront/error/sim-cloudfront.error.d.ts

@@ -152,4 +152,15 @@ export declare class SimCloudFrontFunctionSizeLimitExceeded extends SimCloudFron
     readonly name = "FunctionSizeLimitExceeded";
     constructor(message: string);
 }
+/**
+ * Simulated CloudFront InvalidWebACLId error.
+ *
+ * What CloudFront answers when a DistributionConfig's `WebACLId` names no
+ * `CLOUDFRONT` scope web ACL this simulation holds, at Distribution create or
+ * update time rather than when the first request needs a decision.
+ */
+export declare class SimCloudFrontInvalidWebAclId extends SimCloudFrontError {
+    readonly name = "InvalidWebACLId";
+    constructor(message: string);
+}
 //# sourceMappingURL=sim-cloudfront.error.d.ts.map

package/dist/service/cloudfront/error/sim-cloudfront.error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloudfront.error.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/error/sim-cloudfront.error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;aAGzB,SAAS,EAAE,0BAA0B;IAFvD,YACE,OAAO,EAAE,MAAM,EACC,SAAS,GAAE,0BAA+B,EAG3D;CACF;AAED;;;;;;GAMG;AACH,qBAAa,qCAAsC,SAAQ,kBAAkB;IAC3E,SAAyB,IAAI,8BAA8B;IAE3D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,qCAAsC,SAAQ,kBAAkB;IAC3E,SAAyB,IAAI,8BAA8B;IAE3D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,6BAA8B,SAAQ,kBAAkB;IACnE,SAAyB,IAAI,sBAAsB;IAEnD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,gCAAiC,SAAQ,kBAAkB;IACtE,SAAyB,IAAI,yBAAyB;IAEtD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,4BAA6B,SAAQ,kBAAkB;IAClE,SAAyB,IAAI,qBAAqB;IAElD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;GAIG;AACH,qBAAa,+BAAgC,SAAQ,kBAAkB;IACrE,SAAyB,IAAI,wBAAwB;IAErD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;GAIG;AACH,qBAAa,iCAAkC,SAAQ,kBAAkB;IACvE,SAAyB,IAAI,0BAA0B;IAEvD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;GAIG;AACH,qBAAa,wCAAyC,SAAQ,kBAAkB;IAC9E,SAAyB,IAAI,iCAAiC;IAE9D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,2CAA4C,SAAQ,kBAAkB;IACjF,SAAyB,IAAI,oCAAoC;IAEjE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,+CAAgD,SAAQ,kBAAkB;IACrF,SAAyB,IAAI,wCAAwC;IAErE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,uCAAwC,SAAQ,kBAAkB;IAC7E,SAAyB,IAAI,gCAAgC;IAE7D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,6CAA8C,SAAQ,kBAAkB;IACnF,SAAyB,IAAI,sCAAsC;IAEnE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,mCAAoC,SAAQ,kBAAkB;IACzE,SAAyB,IAAI,4BAA4B;IAEzD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,oCAAqC,SAAQ,kBAAkB;IAC1E,SAAyB,IAAI,6BAA6B;IAE1D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,sCAAuC,SAAQ,kBAAkB;IAC5E,SAAyB,IAAI,+BAA+B;IAE5D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}
+{"version":3,"file":"sim-cloudfront.error.d.ts","sourceRoot":"","sources":["../../../../src/service/cloudfront/error/sim-cloudfront.error.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;aAGzB,SAAS,EAAE,0BAA0B;IAFvD,YACE,OAAO,EAAE,MAAM,EACC,SAAS,GAAE,0BAA+B,EAG3D;CACF;AAED;;;;;;GAMG;AACH,qBAAa,qCAAsC,SAAQ,kBAAkB;IAC3E,SAAyB,IAAI,8BAA8B;IAE3D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,qCAAsC,SAAQ,kBAAkB;IAC3E,SAAyB,IAAI,8BAA8B;IAE3D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,6BAA8B,SAAQ,kBAAkB;IACnE,SAAyB,IAAI,sBAAsB;IAEnD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,gCAAiC,SAAQ,kBAAkB;IACtE,SAAyB,IAAI,yBAAyB;IAEtD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,4BAA6B,SAAQ,kBAAkB;IAClE,SAAyB,IAAI,qBAAqB;IAElD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;GAIG;AACH,qBAAa,+BAAgC,SAAQ,kBAAkB;IACrE,SAAyB,IAAI,wBAAwB;IAErD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;GAIG;AACH,qBAAa,iCAAkC,SAAQ,kBAAkB;IACvE,SAAyB,IAAI,0BAA0B;IAEvD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;GAIG;AACH,qBAAa,wCAAyC,SAAQ,kBAAkB;IAC9E,SAAyB,IAAI,iCAAiC;IAE9D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,2CAA4C,SAAQ,kBAAkB;IACjF,SAAyB,IAAI,oCAAoC;IAEjE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,+CAAgD,SAAQ,kBAAkB;IACrF,SAAyB,IAAI,wCAAwC;IAErE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,uCAAwC,SAAQ,kBAAkB;IAC7E,SAAyB,IAAI,gCAAgC;IAE7D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,6CAA8C,SAAQ,kBAAkB;IACnF,SAAyB,IAAI,sCAAsC;IAEnE,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,mCAAoC,SAAQ,kBAAkB;IACzE,SAAyB,IAAI,4BAA4B;IAEzD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;GAKG;AACH,qBAAa,oCAAqC,SAAQ,kBAAkB;IAC1E,SAAyB,IAAI,6BAA6B;IAE1D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,sCAAuC,SAAQ,kBAAkB;IAC5E,SAAyB,IAAI,+BAA+B;IAE5D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;;;;;GAMG;AACH,qBAAa,4BAA6B,SAAQ,kBAAkB;IAClE,SAAyB,IAAI,qBAAqB;IAElD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}

package/dist/service/cloudfront/error/sim-cloudfront.error.js

@@ -179,4 +179,17 @@ export class SimCloudFrontFunctionSizeLimitExceeded extends SimCloudFrontError {
         super(message, { httpStatusCode: 413 });
     }
 }
+/**
+ * Simulated CloudFront InvalidWebACLId error.
+ *
+ * What CloudFront answers when a DistributionConfig's `WebACLId` names no
+ * `CLOUDFRONT` scope web ACL this simulation holds, at Distribution create or
+ * update time rather than when the first request needs a decision.
+ */
+export class SimCloudFrontInvalidWebAclId extends SimCloudFrontError {
+    name = "InvalidWebACLId";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
 //# sourceMappingURL=sim-cloudfront.error.js.map

package/dist/service/cloudfront/error/sim-cloudfront.error.js.map

@@ -1 +1 @@
-{"version":3,"file":"sim-cloudfront.error.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/error/sim-cloudfront.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGzB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAA+B,EAAE;QAE1D,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,qCAAsC,SAAQ,kBAAkB;IAClD,IAAI,GAAG,0BAA0B,CAAC;IAE3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,qCAAsC,SAAQ,kBAAkB;IAClD,IAAI,GAAG,0BAA0B,CAAC;IAE3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,6BAA8B,SAAQ,kBAAkB;IAC1C,IAAI,GAAG,kBAAkB,CAAC;IAEnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,gCAAiC,SAAQ,kBAAkB;IAC7C,IAAI,GAAG,qBAAqB,CAAC;IAEtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,4BAA6B,SAAQ,kBAAkB;IACzC,IAAI,GAAG,iBAAiB,CAAC;IAElD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,+BAAgC,SAAQ,kBAAkB;IAC5C,IAAI,GAAG,oBAAoB,CAAC;IAErD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,iCAAkC,SAAQ,kBAAkB;IAC9C,IAAI,GAAG,sBAAsB,CAAC;IAEvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,wCAAyC,SAAQ,kBAAkB;IACrD,IAAI,GAAG,6BAA6B,CAAC;IAE9D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,2CAA4C,SAAQ,kBAAkB;IACxD,IAAI,GAAG,gCAAgC,CAAC;IAEjE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,+CAAgD,SAAQ,kBAAkB;IAC5D,IAAI,GAAG,oCAAoC,CAAC;IAErE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,uCAAwC,SAAQ,kBAAkB;IACpD,IAAI,GAAG,4BAA4B,CAAC;IAE7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,6CAA8C,SAAQ,kBAAkB;IAC1D,IAAI,GAAG,kCAAkC,CAAC;IAEnE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,mCAAoC,SAAQ,kBAAkB;IAChD,IAAI,GAAG,wBAAwB,CAAC;IAEzD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,oCAAqC,SAAQ,kBAAkB;IACjD,IAAI,GAAG,yBAAyB,CAAC;IAE1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,sCAAuC,SAAQ,kBAAkB;IACnD,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}
+{"version":3,"file":"sim-cloudfront.error.js","sourceRoot":"","sources":["../../../../src/service/cloudfront/error/sim-cloudfront.error.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAGzB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAA+B,EAAE;QAE1D,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,qCAAsC,SAAQ,kBAAkB;IAClD,IAAI,GAAG,0BAA0B,CAAC;IAE3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,qCAAsC,SAAQ,kBAAkB;IAClD,IAAI,GAAG,0BAA0B,CAAC;IAE3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,6BAA8B,SAAQ,kBAAkB;IAC1C,IAAI,GAAG,kBAAkB,CAAC;IAEnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,gCAAiC,SAAQ,kBAAkB;IAC7C,IAAI,GAAG,qBAAqB,CAAC;IAEtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,4BAA6B,SAAQ,kBAAkB;IACzC,IAAI,GAAG,iBAAiB,CAAC;IAElD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,+BAAgC,SAAQ,kBAAkB;IAC5C,IAAI,GAAG,oBAAoB,CAAC;IAErD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,iCAAkC,SAAQ,kBAAkB;IAC9C,IAAI,GAAG,sBAAsB,CAAC;IAEvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,wCAAyC,SAAQ,kBAAkB;IACrD,IAAI,GAAG,6BAA6B,CAAC;IAE9D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,2CAA4C,SAAQ,kBAAkB;IACxD,IAAI,GAAG,gCAAgC,CAAC;IAEjE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,+CAAgD,SAAQ,kBAAkB;IAC5D,IAAI,GAAG,oCAAoC,CAAC;IAErE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,uCAAwC,SAAQ,kBAAkB;IACpD,IAAI,GAAG,4BAA4B,CAAC;IAE7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,6CAA8C,SAAQ,kBAAkB;IAC1D,IAAI,GAAG,kCAAkC,CAAC;IAEnE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,mCAAoC,SAAQ,kBAAkB;IAChD,IAAI,GAAG,wBAAwB,CAAC;IAEzD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,oCAAqC,SAAQ,kBAAkB;IACjD,IAAI,GAAG,yBAAyB,CAAC;IAE1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,sCAAuC,SAAQ,kBAAkB;IACnD,IAAI,GAAG,2BAA2B,CAAC;IAE5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,4BAA6B,SAAQ,kBAAkB;IACzC,IAAI,GAAG,iBAAiB,CAAC;IAElD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}